ITPEC IP April 2019 Question 74

Topic: Security

An e-mail with a subject of “Caution: New computer virus” was received from the external network. The sender is not an acquaintance, and the content may or may not be true. However, the e-mail describes the characteristics of the virus, and instructs that the e-mail must be forwarded to as many people as possible. Which of the following is an appropriate course of action to be taken for this e-mail?

Explanation

The e-mail is not forwarded to anyone — an unverified warning that asks to be forwarded widely is a chain e-mail, most likely a virus hoax.

The sender is unknown, the content cannot be confirmed, and the message demands to be passed on to as many people as possible: the marks of a chain e-mail. Forwarding it spreads possibly false information, alarms people and loads mail servers and networks, whether or not the virus exists. The right action is to stop it there; if in doubt, check with the security administrator or a trusted source such as an antivirus vendor.

Answer (c)

Why not others:

  • •(a) and (b) — forwarding it to acquaintances or to all employees is exactly the spreading the chain e-mail asks for
  • •(d) — replying to an unknown sender confirms that the address is live and asks an untrusted source for security advice

Key rule: Never forward chain e-mail, even when it poses as a warning; confirm security information through official channels such as the security administrator or the vendor.

Security · AI-written, may contain errors

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.